THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

tshark, source/destination & transmitter/receiver mac addresses capturing 802.11

hello

I 'm wondering how to make source/destination & transmitter/receiver mac addresses available on live packet capturing on tshark report in CMD windows capturing 802.11... ???

i tried (C:\program files\wireshark>tshark -I -i "WNC" -n -c 500) but all 4 addresses mentioned above are required.

thanks in advanced any comment is appreciated.

er's avatar
3
er
asked 2020-04-29 18:17:56 +0000, updated 2020-04-29 18:19:07 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Have you tested that -I|--monitor-mode is working on Windows?

Chuckc's avatar Chuckc (2020-04-29 18:47:18 +0000) edit
add a comment see more comments

1 Answer

0

Change "wlan0" to "WNC" or appropriate interface name.

tshark -I -i wlan0 -n -c 500 -T fields -e wlan.sa -e wlan.da -e wlan.ta -e wlan.ra 

                        70:ef:00:xx:xx:xx
f0:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff       f0:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff
12:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff       12:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff
02:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff       02:9f:c2:xx:xx:xx       ff:ff:ff:ff:ff:ff
Chuckc's avatar
3k
Chuckc
answered 2020-04-29 18:26:41 +0000, updated 2020-04-29 18:31:19 +0000
edit flag offensive 0 remove flag delete link

Comments

thank you in advanced

I appreciate your answer

er's avatar er (2020-04-29 19:29:03 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer